CVE-2026-78080

CVSS 9.3 (critical) · published 2026-09-03

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors.

Weakness: CWE-89

Source: NVD CVE-2026-78080

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.